$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft File: x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft (raw, json) Hash identifier: NGXjyR6mBhzty6CgraToI8UWqrd40WPrSy4QhVLmeLs= Subject key identifier: 2D:C4:CA:5A:EC:B7:20:A4:61:A9:E4:DB:D4:27:D2:F0:34:66:00:AA Authority key identifier: C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B Certificate issuer: /CN=A9131A5E/serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft Manifest number: 0195 Signing time: Sat 23 Aug 2025 03:30:53 +0000 Manifest this update: Sat 23 Aug 2025 03:30:52 +0000 Manifest next update: Sat 30 Aug 2025 03:30:52 +0000 Files and hashes: 1: x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl (hash: oD7ItFGzmzZlXH43NKZBqzn1Z8pJ2aZy79CqXhbChN0=) 2: 96BD724A36E411F0AAE1DE39C4F9AE02.roa (hash: kKqvj0xomNS0RBNYUt8mH1385WpqQD6GeAsQ4vaFhLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:30:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131A5E, serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B Validity Not Before: Aug 23 03:30:52 2025 GMT Not After : Aug 30 03:30:52 2025 GMT Subject: CN=68a935ec-4e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e3:d6:cb:0b:e0:b3:4f:cf:ee:0f:fb:7b:17: 63:05:4a:fc:8a:5d:5b:e6:ad:5d:74:7b:a6:e4:b6: 19:52:fc:dd:ba:78:9a:4b:1b:d3:dd:5a:4b:f2:bc: 8f:b9:97:b0:d6:60:84:f5:2e:c0:d5:c5:b0:c6:41: 52:21:6a:a2:30:03:cb:a4:4f:0e:f3:26:42:62:00: 2a:9b:23:2a:cc:36:ef:fe:7f:33:7a:37:2d:f8:9a: 82:c6:54:68:40:f5:8f:d8:01:83:a3:b7:c5:69:92: ab:98:87:35:60:ae:12:00:8f:53:16:ad:5e:5f:3d: ef:b8:5e:68:61:72:5c:47:6d:a0:61:22:20:f9:22: 74:2f:0a:1c:df:13:d3:9b:2c:bd:d9:a9:06:ff:99: c3:d0:65:d1:65:2c:2e:19:e6:c9:e8:fc:fb:05:7e: fc:70:b6:aa:3f:72:89:cb:41:d1:45:30:2c:3d:f5: b2:3e:d0:d5:65:d0:8e:55:ec:56:02:68:52:f5:5b: 51:ad:7b:73:de:2e:08:c2:44:b2:fd:8d:2f:a5:47: a5:bf:3a:2b:e0:69:4d:1a:f1:d3:89:07:65:bc:4e: 75:15:d5:54:95:b9:89:d9:31:29:e6:1e:57:6e:0f: d4:ea:71:14:c3:52:78:03:94:45:aa:b8:3b:3c:f8: ea:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C4:CA:5A:EC:B7:20:A4:61:A9:E4:DB:D4:27:D2:F0:34:66:00:AA X509v3 Authority Key Identifier: keyid:C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:51:bd:9a:d2:2b:15:67:b7:48:91:1d:7f:e5:11:d6:00:6c: 22:f0:74:0b:c3:94:f3:f3:4d:7d:6d:65:3e:90:a4:98:e3:e8: 48:a5:a5:cc:14:e9:09:72:8e:d2:d9:f2:f9:3a:72:c9:de:b2: 7e:a0:9c:38:0a:0a:60:8c:f6:73:e6:19:dd:fc:8e:52:a5:0a: 36:b8:37:e8:d8:c2:82:12:73:28:af:f0:1f:af:04:7e:2e:00: fd:9e:54:d7:79:1f:8d:55:9c:57:e9:93:e7:6f:fd:82:5b:a8: d8:d9:b8:b3:f0:cc:de:9e:d6:af:94:27:34:41:22:09:f7:2d: c7:07:f5:b2:03:f9:98:c3:41:0f:50:87:d6:53:10:09:11:a5: cd:e1:a0:11:4d:79:3e:8f:e6:1f:79:86:3e:1e:e5:43:c9:3b: fe:b6:b4:48:32:b4:c1:5e:fb:ed:cb:28:68:e7:78:a6:d1:f6: 96:65:5a:13:e6:69:55:4a:f3:96:9e:e3:b5:51:9d:fc:bd:2d: b4:fe:6f:6b:81:71:2c:b6:6e:53:a6:34:6e:f8:7b:0b:6b:8d: 61:66:b4:19:52:75:ca:2a:1a:2f:64:f5:17:0e:ba:52:3b:42: dc:6c:65:bc:cd:32:80:81:21:80:9c:ef:d3:66:c0:a2:a0:18: de:55:44:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBNUUxMTAvBgNVBAUTKEM3NEIzNEY1MDg0QzNENDI3RDJEQjUyODRFMEE1RTMw NzcwQjkzM0IwHhcNMjUwODIzMDMzMDUyWhcNMjUwODMwMDMzMDUyWjAYMRYwFAYD VQQDEw02OGE5MzVlYy00ZTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOPWywvgs0/P7g/7exdjBUr8il1b5q1ddHum5LYZUvzduniaSxvT3VpL8ryP uZew1mCE9S7A1cWwxkFSIWqiMAPLpE8O8yZCYgAqmyMqzDbv/n8zejct+JqCxlRo QPWP2AGDo7fFaZKrmIc1YK4SAI9TFq1eXz3vuF5oYXJcR22gYSIg+SJ0Lwoc3xPT myy92akG/5nD0GXRZSwuGebJ6Pz7BX78cLaqP3KJy0HRRTAsPfWyPtDVZdCOVexW AmhS9VtRrXtz3i4IwkSy/Y0vpUelvzor4GlNGvHTiQdlvE51FdVUlbmJ2TEp5h5X bg/U6nEUw1J4A5RFqrg7PPjqCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3Eylrs tyCkYank29Qn0vA0ZgCqMB8GA1UdIwQYMBaAFMdLNPUITD1CfS21KE4KXjB3C5M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUE1RS8wMzQ2MkU2NjEw RUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBVSjlMYlVvVGdwZU1IY0xr enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gwczA5UWhNUFVKOUxiVW9UZ3BlTUhjTGt6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUE1RS8wMzQ2MkU2NjEwRUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBV SjlMYlVvVGdwZU1IY0xrenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdUb2a0isVZ7dIkR1/5RHWAGwi8HQLw5Tz8019bWU+kKSY4+hIpaXM FOkJco7S2fL5OnLJ3rJ+oJw4CgpgjPZz5hnd/I5SpQo2uDfo2MKCEnMor/AfrwR+ LgD9nlTXeR+NVZxX6ZPnb/2CW6jY2biz8MzentavlCc0QSIJ9y3HB/WyA/mYw0EP UIfWUxAJEaXN4aARTXk+j+YfeYY+HuVDyTv+trRIMrTBXvvtyyho53im0faWZVoT 5mlVSvOWnuO1UZ38vS20/m9rgXEstm5TpjRu+HsLa41hZrQZUnXKKhovZPUXDrpS O0LcbGW8zTKAgSGAnO/TZsCioBjeVUTJ -----END CERTIFICATE-----Generated at Sat Aug 23 21:06:37 2025 by rpki-client